Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/7ns_Q5kOyBdR0teM2VyEoeXcCxI.roa
File: 7ns_Q5kOyBdR0teM2VyEoeXcCxI.roa (raw, json)
Hash identifier: HrFj9PS+XvjXq559N8lCsGtSJP9qEIAKXcn+VLsInFM=
Subject key identifier: EE:7B:3F:43:99:0E:C8:17:51:D2:D7:8C:D9:5C:84:A1:E5:DC:0B:12
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 01881FE2FBF831F9D4E558423D2DAEEE776C
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/7ns_Q5kOyBdR0teM2VyEoeXcCxI.roa
Signing time: Mon 15 May 2023 14:49:09 +0000
ROA not before: Mon 15 May 2023 14:49:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201791
IP address blocks: 45.155.212.0/22 maxlen: 24
195.35.114.0/23 maxlen: 24
185.103.76.0/22 maxlen: 22
2a06:2a80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:e2:fb:f8:31:f9:d4:e5:58:42:3d:2d:ae:ee:77:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: May 15 14:49:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee7b3f43990ec81751d2d78cd95c84a1e5dc0b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:23:bc:10:e4:70:7e:72:a8:a8:e0:6a:2e:
3c:5b:b0:0b:dc:d0:c9:da:9c:7a:41:57:7f:7a:30:
29:41:a8:d6:1f:af:58:c6:22:a0:55:4d:35:24:51:
d7:29:d8:95:64:56:3b:6a:45:b6:a8:5d:22:89:5a:
5d:19:51:16:34:1e:41:44:37:0f:db:b1:8a:d5:ff:
89:7b:b3:04:d7:be:ba:7a:3d:6d:48:82:b7:7f:e7:
81:e6:94:94:76:a2:aa:61:b5:cf:c4:13:bd:8d:74:
2f:22:01:02:ea:77:3e:21:53:d1:6b:54:ea:b2:9a:
1f:c7:d1:f2:2f:38:8c:12:63:ec:f8:2d:cd:70:43:
5b:20:62:f8:20:86:ef:5f:07:50:a3:fe:c8:3a:81:
6e:f8:89:fe:0f:07:a2:a0:ec:4c:06:c3:01:bf:48:
c5:2e:d9:3a:d2:23:c6:0b:7b:0b:8f:ee:51:4d:45:
53:11:ab:13:23:23:d3:e8:d0:06:1c:02:d3:4e:47:
b4:cd:70:0e:8f:52:0a:c2:6b:c4:2d:b2:5d:d1:1d:
c0:23:c9:ae:99:0f:69:f2:fe:7b:fe:ee:82:30:b5:
db:10:e3:d6:e3:a1:44:e1:9a:eb:3b:b8:7f:21:56:
d9:88:31:df:2b:d2:62:58:18:88:99:10:91:79:75:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7B:3F:43:99:0E:C8:17:51:D2:D7:8C:D9:5C:84:A1:E5:DC:0B:12
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/7ns_Q5kOyBdR0teM2VyEoeXcCxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.212.0/22
185.103.76.0/22
195.35.114.0/23
IPv6:
2a06:2a80::/29
Signature Algorithm: sha256WithRSAEncryption
50:e5:c0:b6:cb:b8:e5:8d:41:b4:da:bd:45:be:2a:fd:17:1c:
d2:7f:dc:db:6a:70:41:2a:34:b5:03:2a:90:7f:f9:07:4c:1d:
25:05:6b:ee:d9:9f:59:89:34:c4:87:e0:eb:59:89:61:f4:10:
34:9f:3c:ee:3b:00:c1:eb:91:fe:39:1b:87:4d:49:13:c2:68:
01:88:bc:be:a5:3c:81:d7:f9:17:6b:22:26:44:44:98:7c:2e:
03:4a:3d:d0:60:12:b9:39:bd:fd:c7:44:9b:b1:cc:b9:45:2b:
23:f5:47:fd:b1:18:e6:4d:16:02:bd:ac:a8:e4:17:f0:bf:a5:
6d:55:75:72:00:e6:0b:05:f3:34:d1:6d:73:fa:9d:3c:c9:48:
74:cc:1a:eb:fe:fd:d3:7d:09:e8:12:87:25:95:9b:9c:b9:b2:
3d:10:20:64:2b:66:d1:ea:d3:b7:97:0c:94:13:2d:6f:1d:4a:
99:9d:d5:46:6b:71:6a:e0:8f:c4:ed:44:3d:1c:53:3d:97:bf:
f6:80:95:4f:80:bc:bb:ba:48:88:63:d5:c2:5d:4b:c1:21:c0:
fc:f9:1e:13:20:f2:d0:29:95:e1:43:b7:ec:b4:46:56:e5:d7:
a4:52:79:cd:d2:00:cf:c1:7b:ec:26:63:94:01:77:04:a5:7f:
7f:5e:8e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:12 2025 by rpki-client